26 to 50 of 324 Permanent PCI DSS Jobs

Good Energy Change Advisory Board, and ensuring security and resilience impacts are considered and that technical owners complete agreed actions before implementation where required. PCI-DSS Compliance: Coordinate and support PCI-DSS control activity, evidence gathering, control testing and remediation tracking where technology controls … ideally while working alongside technical teams who own implementation. Awareness of recognised security standards or frameworks such as ISO27001, Cyber Essentials, NCSC CAF and PCI-DSS. Strong verbal and written communication skills, with the ability to explain technical matters clearly to non-technical audiences. Demonstrable attention to detail ...

SLAs, SOC performance) to the Head of Information Security and relevant governance forums (e.g. GDPR Steering Committee, security committees). Support compliance activities across PCI DSS, UK GDPR, and ISO 27001/NIST CSF-aligned control requirements as they relate to operational security and monitoring. Maintain evidence … Familiarity with the three lines of defence model and ability to operate credibly across both first-line delivery and second-line oversight. Understanding of PCI DSS, UK GDPR, and NIST CSF control frameworks as applied to operational security. Comfortable working in a lean team, prioritising pragmatically, and balancing ...

Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory, internal and external audit requirements such as PCI -DSS, ensuring documentation and evidence are maintained to a high standard. Qualifications What we are looking for: Previous experience within a relevant function … multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory and compliance frameworks. Additional Information Along with your benefits package we also offer a wide range of perks ...

Design and maintain enterprise security architecture aligned with business objectives and government security frameworks. Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles. Develop and manage the security architecture compliance roadmap in collaboration with … external partners, and stakeholders to develop secure, resilient, and compliant solutions. Requirements Enterprise Security Architecture Cloud Security (Azure, Hybrid and On-Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity ...

Framework and other recognised standards.* Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced and continuously improved.* Support compliance with PCI DSS, UK GDPR, the Data Protection Act 2018 and relevant FCA expectations.## Strengthen cyber operations and resilience* Lead security monitoring, threat management, vulnerability … across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience.* Strong practical knowledge of ISO/IEC 27001, PCI DSS, UK GDPR, the Data Protection Act 2018 and recognised control frameworks such as NIST.* A solid understanding of technology risk, risk appetite ...

industry bodies and turns them into action. Define regulatory, contractual, and breach‐notification obligations, and keep security controls aligned with compliance frameworks (e.g. PCI DSS, SOC 2) and cyber insurance requirements. Own the Information Security budget and make resourcing and tooling recommendations. Production Environment Security Define and maintain … explain risk clearly to executives and engineers alike Desirable Criteria Experience in fintech, payments, or SaaS organizations handling financial data. Working knowledge of PCI DSS 4.0 and experience supporting audits or a SOC 2 Type 2 program. Experience with cloud security posture management and software supply‐chain security. ...

compliance matters Driving identification, escalation, and resolution of cybersecurity GRC risks and issues Supporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA) Producing metrics, KPIs, and executive-level reporting to support risk-based decision making Leading the redesign of the security training program, including role-based … data protection programs Working knowledge of security and compliance frameworks such as ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, etc. Experience implementing and operating GRC platforms and security programs Experience designing, delivering, or modernizing ...

posture. Key Responsibilities Conduct security risk assessments, maintain risk registers, track risks and recommend appropriate mitigations and compensating controls. Perform IT control audits covering PCI DSS, ISO 27002, information security management systems (ISMS), infrastructure and web applications. Support ISO 27001 implementation and maintain information security policies, standards … standards. Required Skills and Experience Experience in cybersecurity, information security, IT risk management or security governance and compliance. Knowledge of ISO 27001, ISO 27002, PCI DSS, NIST and CIS frameworks. Experience conducting risk assessments, IT security audits and remediation tracking. Hands-on experience with vulnerability management and application ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

through to completion. Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against … NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support ...

mentor a team of governance specialists, helping one another succeed through close collaboration . Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets. Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives … security governance with broader business ambitions. What will you bring to the team? Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA). Proven capability to develop a deep understanding of internal and external partners to align security with business goals. Strong leadership ...

mentor a team of governance specialists, helping one another succeed through close collaboration . Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets. Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives … security governance with broader business ambitions. What will you bring to the team? Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA). Proven capability to develop a deep understanding of internal and external partners to align security with business goals. Strong leadership ...

help establish consistent DevOps and platform engineering standards. You will also ensure that our deployment and automation processes meet security and regulatory requirements, including PCI DSS, ISO 27001 and Cyber Essentials.Experience within financial services, a regulated environment or another service-critical industry would be particularly valuable.This … technologies • AWS certifications, such as Solutions Architect Professional, DevOps Engineer Professional or Security Specialty • Experience mentoring engineers or helping set technical and platform standards • PCI DSS or other regulated-industry experience • SRE principles, error budgets, ITIL or service management practices • Automated testing and quality gates within CI/ ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

access to production systems, credentials, logs and customer information. Compliance and Security Culture Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity. Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI‐enabled working. … Clear documentation and communication of technical risk to different audiences. Desirable Azure security, Kubernetes security or recognised cyber‐security certification. Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments. Experience threat modelling AI‐enabled systems, APIs or agentic automation. PERSONAL ATTRIBUTES High ownership, sound ...

technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. ...

access to production systems, credentials, logs and customer information. Compliance and Security Culture • Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity. • Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working. … Clear documentation and communication of technical risk to different audiences. Desirable • Azure security, Kubernetes security or recognised cyber-security certification. • Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments. • Experience threat modelling AI-enabled systems, APIs or agentic automation.**PERSONAL ATTRIBUTES** • High ownership, sound ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance … risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present ...

capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards ISO 27001 readiness, maintaining PCI DSS and supporting UK GDPR compliance. Write and own our security, acceptable use and AI usage policies, and run security‐awareness training across … incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge of PCI DSS and UK GDPR. Strong communication skills and the confidence to challenge decisions where there is genuine risk. Desirable Experience in ecommerce ...

with problems involving several concrete variables in standard situations is required. Candidate must possess a basic understanding of best practice security processes such as PCI DSS, Cobit, NIST, SOC2 Controls, and an understanding of ISO controls, etc. Candidate must demonstrate an understanding of modern security solutions, controls … strongly preferred applicants possess at least 5 years of management experience. Excellent understanding of security standards/certifications such as SOC 2, ISO 27001, PCI DSS, Cyber Essentials (Plus). A good working knowledge of the Travel Industry will be a bonus. Working knowledge of the following systems ...

where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with legal and the Data Protection Officer … facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI/ ...